資源描述：
《juniper防火墻透明模式ha高可用性配置》由會員上傳分享，免費在線閱讀，更多相關內容在行業(yè)資料-天天文庫。
1、醉生夢死的博客http://www.liusuping.com網絡拓撲：?條件要求：軟件做HA的兩臺設備軟件版本必須相同PlatformActive/PassiveActive/ActiveISGSeries5.0.0orabove5.0.0oraboveNS5000Series5.0.0orabove5.0.0oraboveSSG550/550M5.1.0orabove5.1.0oraboveSSG520/520M5.1.0orabove6.0.0oraboveSSG300Series5.4.0orabove5.4.0oraboveSSG1
2、405.4.0orabove6.0.0oraboveSSG5&SSG205.4.0orabove*6.0.0orabove*NS5005.1.0orabove5.1.0oraboveNS200Series5.1.0orabove5.1.0oraboveNS505.1.0oraboveNotSupportedNS255.1.0orabove**NotSupportedNS5gt5.1.0orabove***NotSupported注：醉生夢死的博客http://www.liusuping.com*??extendedlicenserequire
3、d**?SupportsonlyNSRPLite.?***SupportsonlyNSRPLite?&extendedlicenserequired.另外，如果防火墻要做透明模式的HA，那么Active/Active模式要在ScreenOS6.1.0?orabove才支持的；而且是以下平臺：theSSG-500series,NS-ISG-1000,NS-ISG-2000,andallNS-5000platforms.?許可兩臺防火墻必須有想同功能的軟件許可；?硬件兩臺防火墻必須是相同的硬件，有相同的模塊；??網絡詳情：這里配置舉例使用設備IS
4、G1000，兩臺做HA，A/S模式，ethernet1/1為信任端口，ethernet1/2為非信任端口，ethernet1/4為HA接口；?詳細配置：1、????????????配置主設備setinterface"ethernet1/1"zone"V1-Trust"setinterface"ethernet1/2"zone"V1-Untrust"setinterface"ethernet1/4"zone"HA"醉生夢死的博客http://www.liusuping.com?setinterfacevlan1ip10.0.0.1/24seti
5、nterfacevlan1manage-ip10.0.0.2?setinterfacevlan1ipmanageablesetzoneV1-UntrustmanagepingsetzoneV1-Untrustmanageweb?setpolicyid2from"V1-Trust"to"V1-Untrust"?"Any""Any""ANY"permit?setroute0.0.0.0/0interfacevlan1gateway10.0.0.254?setnsrpclusterid1setnsrprto-mirrorsyncsetnsrpvsd
6、-groupid0priority10setnsrpvsd-groupid0preemptsetnsrpvsd-groupid0monitorinterfaceethernet1/1setnsrpvsd-groupid0monitorinterfaceethernet1/2?2、????????????配置備設備setnsrpclusterid1setnsrprto-mirrorsync醉生夢死的博客http://www.liusuping.comsetnsrpvsd-groupid0priority100setnsrpvsd-groupid
7、0monitorinterfaceethernet1/1setnsrpvsd-groupid0monitorinterfaceethernet1/2?nsisg1000->execnsrpsyncglobalsaveSaveglobalconfigurationsuccessfully.Continuetosavelocalconfigurations...Savelocalconfigurationsuccessfully.?nsisg1000->resetnsisg1000->Configurationmodified.?Save?[y]
8、y/n?nnsisg1000->Systemreset?Areyousure?y/n?y?重啟后檢查配置是否已經同步execnsrpsyncglobal-confi
